cv-chn.otiselevator.com

- Otis Elevator Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2b:a0:39:57:8f:6a:0f:ac:3b:e5:98:fe:4d:b8:cf:7c was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Otis Elevator Company

Organization: Otis Elevator Company
State / Province: Connecticut
Locality: Farmington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:a0:39:57:8f:6a:0f:ac:3b:e5:98:fe:4d:b8:cf:7c
Serial Number (int): 57988734350699078395624861915158204284
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 8c:0a:fd:f4:81:c1:78:fa:3c:11:61:c0:36:44:6f:95:a0:13:24:d3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ff:24:37:42:5d:f3:6c:38:05:73:8f:aa:f2:bf:83:aa:48:9f:d2:98
Fingerprint (sha256): 09:e9:a4:2d:6a:8c:0d:0f:85:49:4e:8a:b9:a7:d5:d3:a8:eb:f6:49:ea:a9:02:49:f1:41:2a:55:d9:0b:e6:fa

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cv-chn.otiselevator.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cv-chn.otiselevator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cv-chn.otiselevator.com
www.cv-chn.otiselevator.com

Other certificates including the domain name otiselevator.com

(limited to 100 certificates)
cms-naa-stag.otiselevator.com
ceros2.map.fastly.net
oxp-apac-oft.otiselevator.com
oxp-emea-oft.otiselevator.com
diagnostics-emea-stag.otiselevator.com
cpconfigservice-api-naa-stag.otiselevator.com
eServiceAPI.QA.otiselevator.com
oxp-apac-stag.otiselevator.com
*.dev.otisone.otiselevator.com
oxp-naa.otiselevator.com
GlobalMobilenl-stg.otiselevator.com
otis-iot-stg.otiselevator.com
*.otiselevator.com
auth-api-naa-stag.otiselevator.com
oxpr-apac.otiselevator.com
ceros2.map.fastly.net
qswhqpy.otiselevator.com
reachsurvey.otiselevator.com
datapipeline-emea-oft.otiselevator.com
oxpr-emea-oft.otiselevator.com
gds1.otiselevator.com
diagnostics-naa.otiselevator.com
oxp.otiselevator.com
developers.qa.otiselevator.com
gds2.otiselevator.com
qsnaapy.otiselevator.com
GlobalMobileOtisFR-STG.otiselevator.com
cv-chn.otiselevator.com
fc-naa-stag.otiselevator.com
diagnostics-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
cv-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
*.dlrgroup.com
ota-mm-stg-apac.otiselevator.com
rtv.otiselevator.com
oxp-chn.otiselevator.com
diagnostics-naa.otiselevator.com
ceros2.map.fastly.net
voiceotisline-naa-stag.otiselevator.com
GlobalMobilenl-Devqc.otiselevator.com
oxpr-emea-oft.otiselevator.com
datapipeline-chn-keycloak.otiselevator.com
diagnostics-emea-stag.otiselevator.com
gdsemda006.otiselevator.com
otis-iot-qa.otiselevator.com
ruTTA-prd.otiselevator.com
campusview-emea-stag.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
cms-naa.otiselevator.com
diagnostics-apac-stag.otiselevator.com
smartservice-api-apac-stag.otiselevator.com
connect-api-apac.otiselevator.com
cloudservice-naa.otiselevator.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
bitbucket.otiselevator.com
brandhub.stage.otiselevator.com
globalmobileotisUKtkitapp-prd.otiselevator.com
ruTTA-stg.otiselevator.com
decisions-dev-int.otiselevator.com
cms-apac-stag.otiselevator.com
qlikcrmEMEAstage.otiselevator.com
deviceportal-naa-stag.otiselevator.com
GlobalMobileNL-PRD.otiselevator.com
globalmobileotisauttkitapp-prd.otiselevator.com
deviceportal-apac.otiselevator.com
oxpr-qa.otiselevator.com
cv-emea-stag.otiselevator.com
ceros2.map.fastly.net
decisions-emea.otiselevator.com
gds1.otiselevator.com
oap-emea.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
oxp-emea.otiselevator.com
hipchat.otiselevator.com
cms-naa-stag.otiselevator.com
oxpr-emea.otiselevator.com
jira.otiselevator.com
oxp-naa-stag.otiselevator.com
oap-emea.otiselevator.com
ceros2.map.fastly.net
oxpr-apac-oft.otiselevator.com
remrda.otiselevator.com
cv-apac-stag.otiselevator.com
globalmobileotisEStkitapp-prd.otiselevator.com
ceros2.map.fastly.net
apip-devloper-dev.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
Decisions-dev.otiselevator.com
oxpr-qa.otiselevator.com
developer-studio-dev-emea.otiselevator.com
LinePulseMagentoUAT.otiselevator.com
cv-apac.otiselevator.com
datapipeline-chn-oft.otiselevator.com
ceros2.map.fastly.net
developer-studio-dev-naa.otiselevator.com
datapipeline-apac.otiselevator.com
deviceportal-naa-stag.otiselevator.com

Certificate

The complete raw certificate details for cv-chn.otiselevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG8jCCBdqgAwIBAgIQK6A5V49qD6w75Zj+TbjPfDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MzAzMDkxODE1MDNaFw0yNDA0MDkxODE1MDNaMHoxCzAJBgNVBAYTAlVTMRQwEgYD
VQQIEwtDb25uZWN0aWN1dDETMBEGA1UEBxMKRmFybWluZ3RvbjEeMBwGA1UEChMV
T3RpcyBFbGV2YXRvciBDb21wYW55MSAwHgYDVQQDExdjdi1jaG4ub3Rpc2VsZXZh
dG9yLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALx854PocMtr
fAyAVuC1mByu1jOPkBU9HvdiP4FlS/sjBbCf2Zy1yUiXloLbU8ajOY9WErnsMJZn
y11CFf9uRF1yCwD8WD90CEiBbG0Uq7xF8wuoe0/efrb7cnyUMRnd2t/2h0dTIdfk
EWyu16w3xs3mvXRqLXZFCJiGcDdoWQx0fK77HxYKeSGCXHbwfTq8omO4r6b3qKTa
pyVUAd0iap8ytgQtjg16VNDTRS4BZPjYWqiuqD/MCNJbROwDvekl87I28iHZiZWX
OxHR4A6rh1re/aAqPEETyhfqxuaAWvXL7BzmQSCo7A6ySnaaa7IEMke3HZTjTkSe
b8LKfOsUPMkCAwEAAaOCAzEwggMtMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIwK
/fSBwXj6PBFhwDZEb5WgEyTTMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DG
Cky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50
cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFr
LWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1
c3QubmV0L2xldmVsMWsuY3JsMD8GA1UdEQQ4MDaCF2N2LWNobi5vdGlzZWxldmF0
b3IuY29tght3d3cuY3YtY2huLm90aXNlbGV2YXRvci5jb20wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcG
CmCGSAGG+mwKAQUwKTAnBggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5u
ZXQvcnBhMAgGBmeBDAECAjCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGGx5VqnAAABAMARzBFAiEA
m6Xxk75+4xlwj5nGIUmH57LtS63qaRrjXQNZ7jk5dxYCIAIKO0CoXjkS50H2YeCn
Imgdz2mIz6SuXQrD7ln9tYOcAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6Oq
HQcT0wwAAAGGx5Vq3wAABAMARzBFAiAdiIJMWpl8ugxq6o9s8/vcGzSnjbXFmfwR
mNKz5rS9HQIhAOuFP/Yyu+DETMtTnjLh7JwNHElFRvHqTxYrWFYJMLrvAHYAO1N3
dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGGx5VqxwAABAMARzBFAiEA
h0OZfyvAiX/yOy0mXNoWrRpiRexauUe+/goadfPlBagCIBBdvS8FxlrczibOYkUv
Lg72imLo1rvVA3ZOacyTxPFzMA0GCSqGSIb3DQEBCwUAA4IBAQCxiDhQXm83XCg4
Yvgmob1dRWhOgwZkpTd1LA8q9j+9i2t4i5GSz6seDkfixpe+liS23sIoduczpFyD
/6um5qLrncSqu99EKbuqL7mzuW+2zgidXZmHYa+YQyCIh28PVh4bGNg7+NVSPOJM
uaK0RlSyqFSJBXdnxgpqaqQ0K9sfttJ8t+i/3ywMkxZe/EWB5sK5D2UN4Dm3HrNu
XMj5p7Bx07PWHuEG8iobtf3wl4NKZcHzGYdbAmbG9LkW0X5nfMIIsb0Evvw1IVCG
ou1IRPntTOF3/auLzNUqwcj0T2EmeImt2jqtil+oyJQlS1YnGuyb9I66M4nUNwL2
RuQDXrjB
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHzng+hwy2t8DIBW4LWY
HK7WM4+QFT0e92I/gWVL+yMFsJ/ZnLXJSJeWgttTxqM5j1YSuewwlmfLXUIV/25E
XXILAPxYP3QISIFsbRSrvEXzC6h7T95+tvtyfJQxGd3a3/aHR1Mh1+QRbK7XrDfG
zea9dGotdkUImIZwN2hZDHR8rvsfFgp5IYJcdvB9OryiY7ivpveopNqnJVQB3SJq
nzK2BC2ODXpU0NNFLgFk+NhaqK6oP8wI0ltE7AO96SXzsjbyIdmJlZc7EdHgDquH
Wt79oCo8QRPKF+rG5oBa9cvsHOZBIKjsDrJKdpprsgQyR7cdlONORJ5vwsp86xQ8
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57988734350699078395624861915158204284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 18:15:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 18:15:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Farmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Otis Elevator Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cv-chn.otiselevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23794393967400981818853206755704111828917514870634185379902783647211605099943606673537567437828570741356109686375901572671408871585444256891781140394099087968547541608831529291462586722009131709768629508203254675250874616540051008642700467331230435829805571354620571590993529964928742860788841610545416574837832165668143741907888712213393041961936592168753846109894953113511140730876023439925474428538407771260725229971269390092900296623163006669386983840717901215150581306529788026530959775405353357345936099826384165903805095709889723374594043707435941371566387987710357262921642172990120678767503321029393704565961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c0afdf481c178fa3c1161c036446f95a01324d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cv-chn.otiselevator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cv-chn.otiselevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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